Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwvgskoRnTs-k_0M07NBWiwNAbg.cer
File: rwvgskoRnTs-k_0M07NBWiwNAbg.cer (raw, json)
Hash identifier: 2NE4fc66HMZvwR5uE/ipt3QAubQEZaTwvVEb66AvjBs=
Subject key identifier: AF:0B:E0:B2:4A:11:9D:3B:3E:93:FD:0C:D3:B3:41:5A:2C:0D:01:B8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026208
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/rwvgskoRnTs-k_0M07NBWiwNAbg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 02 Sep 2025 00:11:09 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 142645
IP: 103.171.176.0/23
IP: 2407:c640::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Sep 2025 15:21:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156168 (0x26208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 2 00:11:09 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A9181437, serialNumber=AF0BE0B24A119D3B3E93FD0CD3B3415A2C0D01B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:05:5d:b0:1e:2a:88:8f:39:6d:14:3d:d7:1d:
fd:1f:c3:31:14:57:72:a5:9a:4d:c5:c0:f8:4d:87:
97:95:14:8b:6a:25:ae:a7:6f:1c:c5:e6:68:88:71:
3e:29:4c:91:c0:e8:c4:7a:38:9e:d8:45:46:55:37:
74:e2:7b:d5:f7:fb:78:1d:3c:8f:4a:e0:72:b1:49:
04:2f:ba:47:2b:08:34:b6:9b:0a:96:36:08:f3:c6:
53:0a:50:06:99:04:21:eb:54:bd:38:4a:8f:06:00:
21:41:65:e8:d1:22:1a:97:09:fa:df:b4:6e:67:84:
55:f9:11:2a:4e:d0:8b:64:d0:d8:bf:fd:3c:f5:9e:
82:41:7e:14:7a:67:14:c0:2b:48:ac:c1:c1:2c:bc:
29:3c:33:ea:4c:80:f5:a9:ea:15:c6:38:cd:ba:ee:
a8:b5:ef:aa:84:05:04:19:ea:28:eb:9f:07:b1:4d:
07:66:80:b7:a9:4c:e8:79:ef:a8:8e:00:bb:35:86:
5c:a9:13:b2:a0:83:dc:43:71:f5:e8:d1:6d:62:94:
4c:44:6e:ef:c1:b4:40:7a:30:e1:0a:cf:c8:9c:0a:
3d:df:08:3b:f0:51:c1:eb:5c:19:e9:1e:08:24:23:
c1:63:f3:0e:57:14:00:12:e7:a8:6f:c4:19:5b:23:
ed:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0B:E0:B2:4A:11:9D:3B:3E:93:FD:0C:D3:B3:41:5A:2C:0D:01:B8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/rwvgskoRnTs-k_0M07NBWiwNAbg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142645
sbgp-ipAddrBlock: critical
IPv4:
103.171.176.0/23
IPv6:
2407:c640::/32
Signature Algorithm: sha256WithRSAEncryption
40:b3:2c:72:2c:3c:43:71:ab:59:f6:5c:ef:b0:98:38:82:e1:
95:14:1f:49:62:44:a3:3a:5b:92:a6:72:50:bf:df:a4:9b:02:
97:36:bd:7c:4a:dc:79:c2:62:f1:35:17:55:3c:9b:dc:d0:ab:
31:e9:fc:54:4b:d9:6d:e8:f3:cb:d7:c8:a7:9e:b4:b6:59:e3:
15:3a:09:28:67:81:68:41:d7:02:19:a9:e9:23:0f:63:21:82:
af:90:3c:e8:67:30:09:02:63:5d:32:a5:99:88:9e:be:20:a2:
42:3f:b6:91:12:1d:0b:62:6a:8d:fb:44:c9:94:1a:b2:d8:d4:
8f:e8:5e:5c:c3:5a:92:26:cc:3c:a4:d5:7e:52:d9:45:1f:38:
c9:0e:6f:e4:d5:60:ab:22:af:c4:62:e8:7c:ef:27:00:8a:52:
2b:99:f2:2e:1d:4e:f0:4b:8a:96:b0:cf:8c:28:ad:22:d0:a3:
9b:ab:eb:a9:95:49:f8:3d:ad:b6:d8:f7:23:ff:43:62:e1:3d:
f4:16:82:71:90:27:f8:df:a0:8b:4a:99:ea:5b:08:b1:37:40:
57:fa:9e:71:6d:61:68:a8:9e:ea:24:30:9b:36:ac:96:b0:6b:
18:dc:b0:e9:86:b0:84:dc:54:10:12:e3:3e:fc:a8:68:00:ef:
45:13:28:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 17:09:35 2025 by rpki-client